Personal Data and Voluntary Provision
Access and use of this website do not necessarily require the provision of personal data. You voluntarily decide to provide personal information (such as name, company, position, phone and e mail) when filling out the forms for:

“30 minute conversation” (for business inquiries)

“Join the team” (for job applications)

Below we provide detailed information on how, for what purposes and for what periods we process this data, as well as what your rights as a data subject are under the General Data Protection Regulation (GDPR).

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Personal Data Administrator
Name: NovaGenTech Ltd.
UIC: 208523346
Address of Management: Plovdiv, Blvd. Vasil Aprilov 124A
For questions related to the protection of your personal data and the exercise of your rights, you can contact our responsible person:
E-mail: gdpr@novagentech.eu

1. Purposes, Data Categories and Legal Grounds
The data provided through the website are processed for the following specific purposes:
A. Inquiries about Nearshoring Services (Form “30 Minute Conversation”)

• Purpose: Establishing contact and organizing a video meeting. We use this data to respond to you by email or phone and to schedule a video meeting at a convenient time for you, in order to present our nearshoring services and discuss potential cooperation.
• Data Processed: Name, Surname, Email, Phone, Company Name, Position. 
• Legal Basis under GDPR: Processing is necessary to take steps at your request prior to entering into a contract and based on our legitimate interest in responding to your inquiry.

B. Job Application (Form “Join the Team”)

• Purpose: Selection and assessment process. We review and assess your application and the attached curriculum vitae (CV) for available vacancies in our team.
• Data Processed: Name, Surname, Phone, Email, as well as all data contained in the CV (Education, Experience, Qualifications). Legal Basis under GDPR: Processing is necessary to take steps prior to entering into an employment contract (Pre-contractual relationship). For longer-term storage of the CV after the selection is completed, your explicit consent is required.

2. Recipients, Disclosure and Security

• Recipients: The sole administrator and recipient of your data is NovaGenTec OOD.
• Disclosure to Third Parties: Your personal data will not be disclosed, transferred or sold to third parties for purposes other than those directly related to the main purposes described above.
• Security: The forms are stored on a hosting service provided by SuperHosting.BG. To protect your information during transmission, the entire connection is encrypted with an SSL certificate.

3. Direct Marketing and Visual Materials

• Direct Marketing: Your data will not be used to send direct marketing messages unless you have provided explicit and separate consent to subscribe to a newsletter.
• Corporate Events: NovaGenTec may produce photo or video materials during organized events. This is done for the purpose of presenting our corporate culture and is only done after explicit notification and with a legal basis (legitimate interest or your consent).

4. Data Retention Period

• Prospective Clients: Data is stored for a period of six (6) months from the date of filling out the conversation form.
• Current Clients: Data is stored for the term of the current contract + 5 years after its termination (according to tax and accounting legislation).
• Job Applicants: Stored until the completion of the relevant selection, but no more than 30 days. With your explicit consent, the period may be extended to 12 months for future vacancies.

5. Your Rights as a Data Subject

Any individual whose data is processed has the right to exercise the following rights under the GDPR:

• Right of Access: To receive confirmation and information about how we process your data.
• Right to Rectification: To request the rectification of inaccurate or incomplete data.
• Right to Erasure (“Right to be forgotten”): To request the deletion of your data in the absence of a valid legal basis for their further storage.
• Right to Restriction: To restrict the processing of your personal data for a certain period.
• Right to Data Portability: To receive your data in a structured, machine-readable format and to transfer them to another controller.
• Right to Objection: To object to the processing of your data where it is based on a legitimate interest.
• Right to Withdraw Consent: To withdraw the consent given at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

6. Submission of Requests and Complaints

Submission of Requests: You can exercise your rights by submitting a written request in free text to email:

gdpr@novagentech.eu

Supervisory Authority: If you believe that your rights under the GDPR have been violated, you have the right to file a complaint with the supervisory authority in Bulgaria – the Commission for Personal Data Protection (CPDP).